Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.cer (raw, json)
Hash identifier: dvT2VB2XbgWcAgfgRpg0+QogAK4lBkHzf/hirKZOMOI=
Subject key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02434A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 May 2025 03:14:45 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 139846
IP: 103.186.144.0/23
IP: 2400:71e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148298 (0x2434a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 03:14:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:9d:3b:fc:fe:1d:72:a4:aa:c4:82:f9:78:
86:77:f1:84:3b:f7:93:6d:bf:a1:d0:8f:98:dd:1b:
e2:4b:4c:ce:fc:df:e3:a5:a4:03:95:f9:63:8d:0b:
0e:6f:6e:09:8d:e1:37:7e:af:cd:c7:f8:33:11:71:
9c:ca:1c:de:42:61:6f:15:30:e7:7f:ee:ef:f7:0a:
8e:d6:27:e8:f4:94:85:df:85:3f:40:a3:47:fa:cb:
3c:c2:10:af:a3:e5:a9:96:58:7f:d3:1e:f2:e5:e3:
cb:40:0a:c2:46:50:05:47:18:33:9a:1a:74:c4:1e:
e0:85:14:fd:2a:08:ce:67:e3:12:f4:dd:15:e7:4d:
30:97:38:a7:ef:31:95:f3:34:9c:6c:d1:3d:43:c1:
5d:45:0c:66:26:60:b4:6c:92:be:8d:1b:ba:b7:34:
a7:ed:aa:cf:7c:86:38:b9:3a:b3:19:c8:96:1c:f5:
34:9e:eb:96:7d:d3:ac:82:57:82:ce:9d:2d:90:87:
3f:e2:4c:38:23:d0:d7:8e:5b:e9:27:79:25:41:16:
37:ff:a9:96:b0:85:91:b9:78:2b:91:e5:76:66:82:
c0:83:bf:8b:56:0c:d3:3f:1c:3d:11:44:a0:b4:6a:
66:94:fc:a4:da:7d:76:ee:53:29:93:e7:74:35:c9:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139846
sbgp-ipAddrBlock: critical
IPv4:
103.186.144.0/23
IPv6:
2400:71e0::/32
Signature Algorithm: sha256WithRSAEncryption
cd:b2:dd:10:f0:77:cb:ac:9b:b9:f3:ce:ab:37:ec:62:95:2b:
f9:6f:7f:e4:1c:dc:18:a0:8b:b1:d6:78:fd:5b:6c:75:1a:ff:
f6:4f:e8:fa:6f:f9:08:26:b6:08:5a:e6:31:92:e4:e4:23:99:
5b:ce:12:d6:7a:ef:6a:86:77:ea:60:58:79:c5:db:47:f6:8b:
c2:cf:24:cb:a6:2e:61:ae:0f:29:43:af:f8:12:f8:63:1f:86:
05:c1:28:26:17:71:b6:59:79:ef:03:86:c1:f1:e3:e9:81:48:
1a:d4:3d:5f:52:9c:33:c5:d3:16:7f:f1:2d:bd:6f:bb:6b:4e:
93:c0:64:4f:b5:f9:82:5c:0a:89:9c:42:39:b6:49:20:c0:a0:
34:89:3c:2c:c8:77:38:c8:25:1a:af:10:d1:9a:e0:6e:4e:dc:
19:bb:3a:64:e5:c2:b5:f7:0b:45:43:76:90:17:61:93:38:b8:
0c:5c:cf:b7:34:cd:7b:9d:cb:c7:00:fd:da:d2:fa:b4:a4:9c:
72:ac:81:82:71:53:01:17:7c:3c:9c:62:e1:4a:9b:82:06:74:
ae:ad:d6:ac:06:c7:76:c1:48:cd:8c:9c:92:97:7e:fd:8c:67:
00:0d:5c:ae:59:a0:72:e7:34:d1:1c:12:58:e9:9b:2b:bf:bf:
20:5b:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:13:18 2025 by rpki-client